How to choose a VPN
Pick a VPN by threat model and verifiable claims—not by affiliate ranking tables.
Start with the adversary
- Café Wi‑Fi snoops → encrypted tunnel + kill switch
- Hide ISP address from sites → working full tunnel + DNS
- Strong anonymity vs nation-state → a consumer VPN is probably the wrong tool (VPN vs Tor)
Questions that matter
- What is logged, for how long? Demand specifics.
- Where are companies and servers? Jurisdiction is not marketing flavor text.
- Which protocol? Prefer modern defaults like WireGuard.
- Can you pay privately? Matters for some users.
- Is the client inspectable? Source-available helps.
- Do they admit limits? One region, pending audits, known DoH residuals—honesty is a feature.
Red flags
- Guaranteed anonymity
- “Unlimited” everything with no engineering discussion
- Audits that never name the build you run
- Reviews that are only coupon pages
Trying VeritasVPN
We run WireGuard from Paraguay, document Veritas Shield behavior, take Bitcoin for Premium, and keep source available under BSL. We will not claim a global anycast fantasy we do not operate. Download or read logging explained first.